Overview

This article provides a step-by-step process to review the attempted Windows Event Logs for collection.

Process

To find which Windows Event Logs are being attempted for collection with GFI EventsManager:

1. Open the GFI EventsManager configuration and navigate to the Configuration > Event Sources.
2. In the Group Type field, ensure that Event Sources Groups is selected.
3. Navigate to the Group where the target device for review belongs. Select the target device. Right-click and select Properties.
4. Select the Windows Event Log tab and review Specify the logs to collect:
5. If inherit event log collection and processing from the parent group are selected:
   1. Navigate to the Group where the target device for review belongs. Right-click and select Properties.
   2. Select the Windows Event Log tab and review Specify the logs to collect.

Related Article: How can I verify that GFI EventsManager can retrieve Windows events from a target computer?